Paco Hope spoke with Megan O'Meara at STAREAST 2008 in Orlando, Fla. about how to make sure security testing is designed to address an organizations most important business risks. Paco also talks about how in an agile environment companies have to do a lot of the risk analysis up front and is constantly testted throughout the process.